Glossary

A comprehensive glossary of key cybersecurity terms, including encryption, phishing, and intrusion detection systems, to enhance your security knowledge

Spoofing

Spoofing is any act where an attacker disguises as a trusted entity and wins the victim’s trust so he can execute malicious actions.

SQLi

SQL injection (Structured Query Language Injection) is a code injection attack where unauthorized database commands are performed on a victim’s SQL database.

SSL

SSL, short for Secure Sockets Layer, is the protocol used to establish a secure communication between the web server and the web client. It can also be used to secure email, VoIP, and other communications over unsecured networks.

SSRF

SSRF, short for Server-Side Request Forgery, is a common cyber-attack which allows a hacker to exploit the functionality of a server. This vulnerability is highly threatening because it can be used to target internal systems protected by firewalls and inaccessible by an external network.

Threat

Any event that can adversely affect an organization’s operations or assets through unauthorized access through an information system.

Vulnerability

A vulnerability is a mistake in a software that can be directly exploited by a cybercriminal to gain unauthorized access to a system.

Vulnerability Scanning

Vulnerability scanning is an activity that identifies and reports any vulnerabilities present in a system that a hacker can exploit.

WAF

Web Application Firewall (WAF) is a security tool used to secure web applications from common cyber-attacks by filtering and monitoring HTML traffic entering a web application.

Weakness

A weakness is a flaw or error in a software or hardware system that can create a vulnerability if left unevaluated.

XSS

Cross-site scripting (XSS) is a type of injection attack where malicious scripts are injected into a web browser of a victim. The actual attack occurs when the victim visits the web page or web application that executes the malicious code.